Security advisories (GitHub reviewed), as recorded on Flare Reef (https://flarereef.flareforward.com/p/20)

November 10, 2026. On November 10, 2026, GitHub's security advisory list published 74 new advisories, changed 20, and withdrew 0. A security advisory is a public warning about a hole in a piece of software.
GHSA-358w-w75h-x6rx · published · github[.]com/gopacket/gopacket · MODERATE · gopacket: SCTP chunk sub-decoder out-of-bounds panics on crafted segments
Advisory: https://github.com/advisories/GHSA-358w-w75h-x6rx
The commit: https://github.com/github/advisory-database/commit/2da186578d52e1ad5313480db466ac18ee2718cd
The file: https://github.com/github/advisory-database/blob/2da186578d52e1ad5313480db466ac18ee2718cd/advisories/github-reviewed/2026/11/GHSA-358w-w75h-x6rx/GHSA-358w-w75h-x6rx.json
GHSA-5m6c-38r8-5w76 · published · github[.]com/dagu-org/dagu/v2 · MODERATE · Dagu MCP DAG specification read bypasses path containment and workspace isolation
Advisory: https://github.com/advisories/GHSA-5m6c-38r8-5w76
The commit: https://github.com/github/advisory-database/commit/2da186578d52e1ad5313480db466ac18ee2718cd
The file: https://github.com/github/advisory-database/blob/2da186578d52e1ad5313480db466ac18ee2718cd/advisories/github-reviewed/2026/11/GHSA-5m6c-38r8-5w76/GHSA-5m6c-38r8-5w76.json
GHSA-2h4w-29cv-2cmv · published · ag2 · autogen · HIGH · AG2: Newline injection in SandboxShellTool bypasses allowed=[...] and readonly=True, enabling arbitrary command execution
Advisory: https://github.com/advisories/GHSA-2h4w-29cv-2cmv
The commit: https://github.com/github/advisory-database/commit/3164a5cac5bfb6c213036b8a7652538472d13b7b
The file: https://github.com/github/advisory-database/blob/3164a5cac5bfb6c213036b8a7652538472d13b7b/advisories/github-reviewed/2026/11/GHSA-2h4w-29cv-2cmv/GHSA-2h4w-29cv-2cmv.json
GHSA-2vgq-wchc-25w7 · published · node-forge · LOW · Forge: Incomplete PKCS#7 padding validation in AES/DES CBC and ECB decryption
Advisory: https://github.com/advisories/GHSA-2vgq-wchc-25w7
The commit: https://github.com/github/advisory-database/commit/3164a5cac5bfb6c213036b8a7652538472d13b7b
The file: https://github.com/github/advisory-database/blob/3164a5cac5bfb6c213036b8a7652538472d13b7b/advisories/github-reviewed/2026/11/GHSA-2vgq-wchc-25w7/GHSA-2vgq-wchc-25w7.json
GHSA-3hch-x692-6qj3 · published · gpustack · HIGH · GPUStack: Missing authorization on several cluster and resource endpoints allows cross-user access and cluster takeover
Advisory: https://github.com/advisories/GHSA-3hch-x692-6qj3
The commit: https://github.com/github/advisory-database/commit/3164a5cac5bfb6c213036b8a7652538472d13b7b
The file: https://github.com/github/advisory-database/blob/3164a5cac5bfb6c213036b8a7652538472d13b7b/advisories/github-reviewed/2026/11/GHSA-3hch-x692-6qj3/GHSA-3hch-x692-6qj3.json
GHSA-62m9-f875-rqw6 · published · gpustack · CRITICAL · GPUStack: SAML callback trusts an unverified SAMLResponse, allowing authentication bypass and account takeover
Advisory: https://github.com/advisories/GHSA-62m9-f875-rqw6
The commit: https://github.com/github/advisory-database/commit/3164a5cac5bfb6c213036b8a7652538472d13b7b
The file: https://github.com/github/advisory-database/blob/3164a5cac5bfb6c213036b8a7652538472d13b7b/advisories/github-reviewed/2026/11/GHSA-62m9-f875-rqw6/GHSA-62m9-f875-rqw6.json
GHSA-65v8-q222-64xx · published · compose-lint · MODERATE · compose-lint: `fix --apply` can delete a line the user did not select, including a security setting
Advisory: https://github.com/advisories/GHSA-65v8-q222-64xx
The commit: https://github.com/github/advisory-database/commit/3164a5cac5bfb6c213036b8a7652538472d13b7b
The file: https://github.com/github/advisory-database/blob/3164a5cac5bfb6c213036b8a7652538472d13b7b/advisories/github-reviewed/2026/11/GHSA-65v8-q222-64xx/GHSA-65v8-q222-64xx.json
GHSA-6f4g-xm8v-pgv6 · published · tmatens/compose-lint · compose-lint · MODERATE · compose-lint: Compose file text can issue GitHub Actions workflow commands through the compose-lint Action
Advisory: https://github.com/advisories/GHSA-6f4g-xm8v-pgv6
The commit: https://github.com/github/advisory-database/commit/3164a5cac5bfb6c213036b8a7652538472d13b7b
The file: https://github.com/github/advisory-database/blob/3164a5cac5bfb6c213036b8a7652538472d13b7b/advisories/github-reviewed/2026/11/GHSA-6f4g-xm8v-pgv6/GHSA-6f4g-xm8v-pgv6.json
GHSA-6qrw-m8cv-hcxf · published · node-forge · HIGH · Forge: RSA PKCS#1 v1.5 signature forgery via non-canonical DigestInfo encoding
Advisory: https://github.com/advisories/GHSA-6qrw-m8cv-hcxf
The commit: https://github.com/github/advisory-database/commit/3164a5cac5bfb6c213036b8a7652538472d13b7b
The file: https://github.com/github/advisory-database/blob/3164a5cac5bfb6c213036b8a7652538472d13b7b/advisories/github-reviewed/2026/11/GHSA-6qrw-m8cv-hcxf/GHSA-6qrw-m8cv-hcxf.json
GHSA-6wcv-rj3c-mhv3 · published · compose-lint · tmatens/compose-lint · LOW · compose-lint: .env read through a symlink outside the project can expose the CI job's environment
Advisory: https://github.com/advisories/GHSA-6wcv-rj3c-mhv3
The commit: https://github.com/github/advisory-database/commit/3164a5cac5bfb6c213036b8a7652538472d13b7b
The file: https://github.com/github/advisory-database/blob/3164a5cac5bfb6c213036b8a7652538472d13b7b/advisories/github-reviewed/2026/11/GHSA-6wcv-rj3c-mhv3/GHSA-6wcv-rj3c-mhv3.json
GHSA-752m-7p75-49gf · published · altair-static · altair-express-middleware · altair-koa-middleware · altair-fastify-plugin · MODERATE · Altair: DOM-based XSS via attacker-controlled script URLs in the iframe sandbox
Advisory: https://github.com/advisories/GHSA-752m-7p75-49gf
The commit: https://github.com/github/advisory-database/commit/3164a5cac5bfb6c213036b8a7652538472d13b7b
The file: https://github.com/github/advisory-database/blob/3164a5cac5bfb6c213036b8a7652538472d13b7b/advisories/github-reviewed/2026/11/GHSA-752m-7p75-49gf/GHSA-752m-7p75-49gf.json
GHSA-88f4-frh5-gmcr · published · compose-lint · tmatens/compose-lint · LOW · compose-lint: A `.compose-lint[.]yml` symlinked outside the project is read, and a parse error quotes part of the target
Advisory: https://github.com/advisories/GHSA-88f4-frh5-gmcr
The commit: https://github.com/github/advisory-database/commit/3164a5cac5bfb6c213036b8a7652538472d13b7b
The file: https://github.com/github/advisory-database/blob/3164a5cac5bfb6c213036b8a7652538472d13b7b/advisories/github-reviewed/2026/11/GHSA-88f4-frh5-gmcr/GHSA-88f4-frh5-gmcr.json
GHSA-8vv3-6qpc-gpw6 · published · bitcoinjs-lib · CRITICAL · bitcoinjs-lib: Undetected merkle node duplication in block root computation validates a forged transaction list
Advisory: https://github.com/advisories/GHSA-8vv3-6qpc-gpw6
The commit: https://github.com/github/advisory-database/commit/3164a5cac5bfb6c213036b8a7652538472d13b7b
The file: https://github.com/github/advisory-database/blob/3164a5cac5bfb6c213036b8a7652538472d13b7b/advisories/github-reviewed/2026/11/GHSA-8vv3-6qpc-gpw6/GHSA-8vv3-6qpc-gpw6.json
GHSA-9wg5-mj3p-v49q · published · node-forge · LOW · Forge: Certificate signature verified with the issuer's RSA signature scheme
Advisory: https://github.com/advisories/GHSA-9wg5-mj3p-v49q
The commit: https://github.com/github/advisory-database/commit/3164a5cac5bfb6c213036b8a7652538472d13b7b
The file: https://github.com/github/advisory-database/blob/3164a5cac5bfb6c213036b8a7652538472d13b7b/advisories/github-reviewed/2026/11/GHSA-9wg5-mj3p-v49q/GHSA-9wg5-mj3p-v49q.json
GHSA-chp3-j5qr-2vfr · published · @effect/platform · effect · MODERATE · Effect: Cookie attribute injection via domain, path, and name fields in @effect/platform makeCookie()
Advisory: https://github.com/advisories/GHSA-chp3-j5qr-2vfr
The commit: https://github.com/github/advisory-database/commit/3164a5cac5bfb6c213036b8a7652538472d13b7b
The file: https://github.com/github/advisory-database/blob/3164a5cac5bfb6c213036b8a7652538472d13b7b/advisories/github-reviewed/2026/11/GHSA-chp3-j5qr-2vfr/GHSA-chp3-j5qr-2vfr.json
GHSA-ghwv-vrp2-2975 · published · github[.]com/ultravioletrs/cocos · HIGH · Cocos AI Intra-handshake attested TLS implementation is vulnerable to TOCTOU Attacks
Advisory: https://github.com/advisories/GHSA-ghwv-vrp2-2975
The commit: https://github.com/github/advisory-database/commit/3164a5cac5bfb6c213036b8a7652538472d13b7b
The file: https://github.com/github/advisory-database/blob/3164a5cac5bfb6c213036b8a7652538472d13b7b/advisories/github-reviewed/2026/11/GHSA-ghwv-vrp2-2975/GHSA-ghwv-vrp2-2975.json
GHSA-h46v-rmh6-fq4f · published · node-forge · MODERATE · Forge: X.509 pathLenConstraint not enforced by verifyCertificateChain() for CA certificates without keyUsage
Advisory: https://github.com/advisories/GHSA-h46v-rmh6-fq4f
The commit: https://github.com/github/advisory-database/commit/3164a5cac5bfb6c213036b8a7652538472d13b7b
The file: https://github.com/github/advisory-database/blob/3164a5cac5bfb6c213036b8a7652538472d13b7b/advisories/github-reviewed/2026/11/GHSA-h46v-rmh6-fq4f/GHSA-h46v-rmh6-fq4f.json
GHSA-jf3h-8jvx-vcrg · published · compose-lint · tmatens/compose-lint · LOW · compose-lint: A pull request can make compose-lint quote a secret from a CI-generated `.env` into its findings
Advisory: https://github.com/advisories/GHSA-jf3h-8jvx-vcrg
The commit: https://github.com/github/advisory-database/commit/3164a5cac5bfb6c213036b8a7652538472d13b7b
The file: https://github.com/github/advisory-database/blob/3164a5cac5bfb6c213036b8a7652538472d13b7b/advisories/github-reviewed/2026/11/GHSA-jf3h-8jvx-vcrg/GHSA-jf3h-8jvx-vcrg.json
GHSA-p623-mxf7-qxjm · published · OctoPrint · LOW · OctoPrint: Stored XSS via saved connection parameters
Advisory: https://github.com/advisories/GHSA-p623-mxf7-qxjm
The commit: https://github.com/github/advisory-database/commit/3164a5cac5bfb6c213036b8a7652538472d13b7b
The file: https://github.com/github/advisory-database/blob/3164a5cac5bfb6c213036b8a7652538472d13b7b/advisories/github-reviewed/2026/11/GHSA-p623-mxf7-qxjm/GHSA-p623-mxf7-qxjm.json
GHSA-rhr8-3pm8-cq29 · published · node-forge · HIGH · Forge: ASN.1 resource exhaustion via BIT STRING decoding in asn1[.]fromDer
Advisory: https://github.com/advisories/GHSA-rhr8-3pm8-cq29
The commit: https://github.com/github/advisory-database/commit/3164a5cac5bfb6c213036b8a7652538472d13b7b
The file: https://github.com/github/advisory-database/blob/3164a5cac5bfb6c213036b8a7652538472d13b7b/advisories/github-reviewed/2026/11/GHSA-rhr8-3pm8-cq29/GHSA-rhr8-3pm8-cq29.json
GHSA-rm8w-w798-g545 · published · compose-lint · tmatens/compose-lint · LOW · compose-lint: Incomplete fix for GHSA-jf3h-8jvx-vcrg: a run stopped at the finding limit quotes a secret from a CI-generated `.env`
Advisory: https://github.com/advisories/GHSA-rm8w-w798-g545
The commit: https://github.com/github/advisory-database/commit/3164a5cac5bfb6c213036b8a7652538472d13b7b
The file: https://github.com/github/advisory-database/blob/3164a5cac5bfb6c213036b8a7652538472d13b7b/advisories/github-reviewed/2026/11/GHSA-rm8w-w798-g545/GHSA-rm8w-w798-g545.json
GHSA-whr6-fgpq-fpv9 · published · compose-lint · tmatens/compose-lint · LOW · compose-lint: A committed symlink makes compose-lint quote a file from outside the project into its output
Advisory: https://github.com/advisories/GHSA-whr6-fgpq-fpv9
The commit: https://github.com/github/advisory-database/commit/3164a5cac5bfb6c213036b8a7652538472d13b7b
The file: https://github.com/github/advisory-database/blob/3164a5cac5bfb6c213036b8a7652538472d13b7b/advisories/github-reviewed/2026/11/GHSA-whr6-fgpq-fpv9/GHSA-whr6-fgpq-fpv9.json
GHSA-xggf-m53x-jc3f · published · node-opcua · node-opcua-address-space · node-opcua-server · CRITICAL · node-opcua: Namespace-Level RBAC Fail-Open - Anonymous Write/Call Bypass via Unbound `DefaultRolePermissions
Advisory: https://github.com/advisories/GHSA-xggf-m53x-jc3f
The commit: https://github.com/github/advisory-database/commit/3164a5cac5bfb6c213036b8a7652538472d13b7b
The file: https://github.com/github/advisory-database/blob/3164a5cac5bfb6c213036b8a7652538472d13b7b/advisories/github-reviewed/2026/11/GHSA-xggf-m53x-jc3f/GHSA-xggf-m53x-jc3f.json
GHSA-xwgp-w3pj-q5h3 · published · @ohif/extension-dicom-pdf · HIGH · OHIF Viewers: DOM-Based Cross Site Scripting (XSS) through MIME type of document
Advisory: https://github.com/advisories/GHSA-xwgp-w3pj-q5h3
The commit: https://github.com/github/advisory-database/commit/3164a5cac5bfb6c213036b8a7652538472d13b7b
The file: https://github.com/github/advisory-database/blob/3164a5cac5bfb6c213036b8a7652538472d13b7b/advisories/github-reviewed/2026/11/GHSA-xwgp-w3pj-q5h3/GHSA-xwgp-w3pj-q5h3.json
GHSA-xxrh-5hgg-gj4h · published · @nuxt/content · HIGH · Nuxt Content: Unauthenticated SQLite Function DoS via Content Query API
Advisory: https://github.com/advisories/GHSA-xxrh-5hgg-gj4h
The commit: https://github.com/github/advisory-database/commit/3164a5cac5bfb6c213036b8a7652538472d13b7b
The file: https://github.com/github/advisory-database/blob/3164a5cac5bfb6c213036b8a7652538472d13b7b/advisories/github-reviewed/2026/11/GHSA-xxrh-5hgg-gj4h/GHSA-xxrh-5hgg-gj4h.json
GHSA-r7j4-crjv-h467 · published · compose-lint · MODERATE · compose-lint: Text in a pull request can still issue CI workflow commands through compose-lint 0.31.0's output
Advisory: https://github.com/advisories/GHSA-r7j4-crjv-h467
The commit: https://github.com/github/advisory-database/commit/2377df64ff97bf1c538b37f172175f2d5e0fb040
The file: https://github.com/github/advisory-database/blob/2377df64ff97bf1c538b37f172175f2d5e0fb040/advisories/github-reviewed/2026/11/GHSA-r7j4-crjv-h467/GHSA-r7j4-crjv-h467.json
GHSA-wvg4-6p58-3gh3 · published · rack · MODERATE · Rack: Rack::Static header_rules bypass via dot-segment normalization mismatch
Advisory: https://github.com/advisories/GHSA-wvg4-6p58-3gh3
The commit: https://github.com/github/advisory-database/commit/c9e08863cdccfbf11668980c776059347422cfc0
The file: https://github.com/github/advisory-database/blob/c9e08863cdccfbf11668980c776059347422cfc0/advisories/github-reviewed/2026/11/GHSA-wvg4-6p58-3gh3/GHSA-wvg4-6p58-3gh3.json
GHSA-f9x3-7vq9-cph6 · changed · laravel/framework · CRITICAL · Laravel TokenGuard authentication bypass through non-string API credentials
Advisory: https://github.com/advisories/GHSA-f9x3-7vq9-cph6
The commit: https://github.com/github/advisory-database/commit/eef5bd230119e52ff7cc071b00265c9df5ed6483
The file: https://github.com/github/advisory-database/blob/eef5bd230119e52ff7cc071b00265c9df5ed6483/advisories/github-reviewed/2026/10/GHSA-f9x3-7vq9-cph6/GHSA-f9x3-7vq9-cph6.json
GHSA-2j8w-xcrc-x985 · published · rack · MODERATE · Rack: Rack::Request#host_with_port (and #base_url / #url) return the raw invalid Host header — incomplete fix of CVE-2026-34835
Advisory: https://github.com/advisories/GHSA-2j8w-xcrc-x985
The commit: https://github.com/github/advisory-database/commit/ac00fcce9dc12d4f0dae8421bc3cfa261938449e
The file: https://github.com/github/advisory-database/blob/ac00fcce9dc12d4f0dae8421bc3cfa261938449e/advisories/github-reviewed/2026/11/GHSA-2j8w-xcrc-x985/GHSA-2j8w-xcrc-x985.json
GHSA-wrr5-j383-f7h2 · published · @nocobase/plugin-action-custom-request · MODERATE · NocoBase: @nocobase/plugin-action-custom-request allows server-side request forgery through runtime URL overrides
Advisory: https://github.com/advisories/GHSA-wrr5-j383-f7h2
The commit: https://github.com/github/advisory-database/commit/031f9205459cf444236829acb2ac64c68cc44f9a
The file: https://github.com/github/advisory-database/blob/031f9205459cf444236829acb2ac64c68cc44f9a/advisories/github-reviewed/2026/11/GHSA-wrr5-j383-f7h2/GHSA-wrr5-j383-f7h2.json
GHSA-8hm4-r66f-29wr · changed · alextselegidis/easyappointments · LOW · Easy!Appointments: Authorization bypass in Google OAuth provider binding lets any backend user rebind a peer provider's Google sync
Advisory: https://github.com/advisories/GHSA-8hm4-r66f-29wr
The commit: https://github.com/github/advisory-database/commit/1bba178598540490bb48615e7ab9760584b3885e
The file: https://github.com/github/advisory-database/blob/1bba178598540490bb48615e7ab9760584b3885e/advisories/github-reviewed/2026/07/GHSA-8hm4-r66f-29wr/GHSA-8hm4-r66f-29wr.json
GHSA-996f-334j-67g7 · changed · alextselegidis/easyappointments · LOW · Easy!Appointments disable_booking_message rendered as raw HTML on public booking page — Stored XSS
Advisory: https://github.com/advisories/GHSA-996f-334j-67g7
The commit: https://github.com/github/advisory-database/commit/6a2778b73a55d34aabce00236a35167fc1ddfe1f
The file: https://github.com/github/advisory-database/blob/6a2778b73a55d34aabce00236a35167fc1ddfe1f/advisories/github-reviewed/2026/07/GHSA-996f-334j-67g7/GHSA-996f-334j-67g7.json
GHSA-pm5p-7w5h-jm5q · changed · alextselegidis/easyappointments · LOW · Easy!Appointments has server-side request forgery in CalDAV connection test that exposes the deployment's internal network
Advisory: https://github.com/advisories/GHSA-pm5p-7w5h-jm5q
The commit: https://github.com/github/advisory-database/commit/6a2778b73a55d34aabce00236a35167fc1ddfe1f
The file: https://github.com/github/advisory-database/blob/6a2778b73a55d34aabce00236a35167fc1ddfe1f/advisories/github-reviewed/2026/07/GHSA-pm5p-7w5h-jm5q/GHSA-pm5p-7w5h-jm5q.json
GHSA-p8x9-v4hv-2w4g · published · rack · LOW · Rack: Multipart boundary ambiguity guard in Rack::Multipart::Parser can be bypassed with a quoted boundary value, allowing WAF bypass
Advisory: https://github.com/advisories/GHSA-p8x9-v4hv-2w4g
The commit: https://github.com/github/advisory-database/commit/6a2778b73a55d34aabce00236a35167fc1ddfe1f
The file: https://github.com/github/advisory-database/blob/6a2778b73a55d34aabce00236a35167fc1ddfe1f/advisories/github-reviewed/2026/11/GHSA-p8x9-v4hv-2w4g/GHSA-p8x9-v4hv-2w4g.json
GHSA-fq3v-74gv-27gm · changed · github[.]com/xuri/excelize/v2 · HIGH · Excelize: Unbounded <col max> attribute is loaded with no MaxColumns check and expanded per-column by flatCols(), so any column mutator hangs or OOMs the process
Advisory: https://github.com/advisories/GHSA-fq3v-74gv-27gm
The commit: https://github.com/github/advisory-database/commit/2578fcaa7f4c66d4f4f1b437a4ecf6c8ce063ad7
The file: https://github.com/github/advisory-database/blob/2578fcaa7f4c66d4f4f1b437a4ecf6c8ce063ad7/advisories/github-reviewed/2026/10/GHSA-fq3v-74gv-27gm/GHSA-fq3v-74gv-27gm.json
GHSA-hgj6-7826-r7m5 · changed · com[.]fasterxml[.]jackson[.]core:jackson-databind · tools[.]jackson[.]core:jackson-databind · MODERATE · jackson-databind: InetSocketAddress deserialization triggers eager DNS resolution (SSRF)
Advisory: https://github.com/advisories/GHSA-hgj6-7826-r7m5
The commit: https://github.com/github/advisory-database/commit/2394f9ce1626106d6e7debd69ab1133e98e02171
The file: https://github.com/github/advisory-database/blob/2394f9ce1626106d6e7debd69ab1133e98e02171/advisories/github-reviewed/2026/06/GHSA-hgj6-7826-r7m5/GHSA-hgj6-7826-r7m5.json
GHSA-xvh5-g6gv-559v · changed · Pillow · HIGH ·  Pillow: Memory disclosure and segfault in libtiff encoder via crafted TIFF tags
Advisory: https://github.com/advisories/GHSA-xvh5-g6gv-559v
The commit: https://github.com/github/advisory-database/commit/2394f9ce1626106d6e7debd69ab1133e98e02171
The file: https://github.com/github/advisory-database/blob/2394f9ce1626106d6e7debd69ab1133e98e02171/advisories/github-reviewed/2026/10/GHSA-xvh5-g6gv-559v/GHSA-xvh5-g6gv-559v.json
GHSA-5v64-555j-wjxm · published · rack · HIGH · Rack: Multipart parsing allows DoS via unbounded scan buffer growth
Advisory: https://github.com/advisories/GHSA-5v64-555j-wjxm
The commit: https://github.com/github/advisory-database/commit/2394f9ce1626106d6e7debd69ab1133e98e02171
The file: https://github.com/github/advisory-database/blob/2394f9ce1626106d6e7debd69ab1133e98e02171/advisories/github-reviewed/2026/11/GHSA-5v64-555j-wjxm/GHSA-5v64-555j-wjxm.json
GHSA-7xw9-549r-8jrc · changed · DIRAC · HIGH · DIRAC: SQL injection and lack of access control in PilotManager service
Advisory: https://github.com/advisories/GHSA-7xw9-549r-8jrc
The commit: https://github.com/github/advisory-database/commit/7a194920c1404579546d821a5438e36b4ba15760
The file: https://github.com/github/advisory-database/blob/7a194920c1404579546d821a5438e36b4ba15760/advisories/github-reviewed/2026/07/GHSA-7xw9-549r-8jrc/GHSA-7xw9-549r-8jrc.json
GHSA-m4m7-4cw8-62j6 · changed · DIRAC · CRITICAL · DIRAC is vulnerable to RCE in FileCatalog DatasetManager via SQL injection + eval
Advisory: https://github.com/advisories/GHSA-m4m7-4cw8-62j6
The commit: https://github.com/github/advisory-database/commit/7a194920c1404579546d821a5438e36b4ba15760
The file: https://github.com/github/advisory-database/blob/7a194920c1404579546d821a5438e36b4ba15760/advisories/github-reviewed/2026/07/GHSA-m4m7-4cw8-62j6/GHSA-m4m7-4cw8-62j6.json
GHSA-vg99-gr89-qhw9 · changed · DIRAC · HIGH · DIRAC: Pilot code downloaded over unverified HTTPS connection
Advisory: https://github.com/advisories/GHSA-vg99-gr89-qhw9
The commit: https://github.com/github/advisory-database/commit/7a194920c1404579546d821a5438e36b4ba15760
The file: https://github.com/github/advisory-database/blob/7a194920c1404579546d821a5438e36b4ba15760/advisories/github-reviewed/2026/07/GHSA-vg99-gr89-qhw9/GHSA-vg99-gr89-qhw9.json
GHSA-pcrw-h46h-c93h · published · mongoose · CRITICAL · Mongoose: sanitizeFilter not applied on countDocuments
Advisory: https://github.com/advisories/GHSA-pcrw-h46h-c93h
The commit: https://github.com/github/advisory-database/commit/7a194920c1404579546d821a5438e36b4ba15760
The file: https://github.com/github/advisory-database/blob/7a194920c1404579546d821a5438e36b4ba15760/advisories/github-reviewed/2026/11/GHSA-pcrw-h46h-c93h/GHSA-pcrw-h46h-c93h.json
GHSA-9jpv-c7p4-997x · changed · DIRAC · CRITICAL · DIRAC is vulnerable to RCE in RequestManager due to eval on untrusted input
Advisory: https://github.com/advisories/GHSA-9jpv-c7p4-997x
The commit: https://github.com/github/advisory-database/commit/4dcabe15d1d58317dc03aaa66358d8fd33b0a423
The file: https://github.com/github/advisory-database/blob/4dcabe15d1d58317dc03aaa66358d8fd33b0a423/advisories/github-reviewed/2026/07/GHSA-9jpv-c7p4-997x/GHSA-9jpv-c7p4-997x.json
GHSA-w5f2-9q9c-ff4h · changed · lmcache · CRITICAL · LMCache: Remote code execution via unsafe deserialization in multiprocess mode transport
Advisory: https://github.com/advisories/GHSA-w5f2-9q9c-ff4h
The commit: https://github.com/github/advisory-database/commit/4dcabe15d1d58317dc03aaa66358d8fd33b0a423
The file: https://github.com/github/advisory-database/blob/4dcabe15d1d58317dc03aaa66358d8fd33b0a423/advisories/github-reviewed/2026/10/GHSA-w5f2-9q9c-ff4h/GHSA-w5f2-9q9c-ff4h.json
GHSA-wwx6-x28x-8259 · changed · russh · HIGH · russh: Post-decompression SSH packet size was not bounded, allowing remote oversized compressed packets
Advisory: https://github.com/advisories/GHSA-wwx6-x28x-8259
The commit: https://github.com/github/advisory-database/commit/9d24ee4e688adb04f683b2009dcffa8361518d08
The file: https://github.com/github/advisory-database/blob/9d24ee4e688adb04f683b2009dcffa8361518d08/advisories/github-reviewed/2026/05/GHSA-wwx6-x28x-8259/GHSA-wwx6-x28x-8259.json
GHSA-m665-v7pm-7grj · changed · zip · CRITICAL · zip: Critical Parser Differential & Security Control Bypass via Dual-Header Inconsistencies (Zip Cloaking) Leading to Arbitrary File Overwrite & RCE
Advisory: https://github.com/advisories/GHSA-m665-v7pm-7grj
The commit: https://github.com/github/advisory-database/commit/9d24ee4e688adb04f683b2009dcffa8361518d08
The file: https://github.com/github/advisory-database/blob/9d24ee4e688adb04f683b2009dcffa8361518d08/advisories/github-reviewed/2026/10/GHSA-m665-v7pm-7grj/GHSA-m665-v7pm-7grj.json
GHSA-gg4r-jv3p-qx3c · published · mongoose · HIGH · Mongoose: Connection-level sanitizeFilter not applied
Advisory: https://github.com/advisories/GHSA-gg4r-jv3p-qx3c
The commit: https://github.com/github/advisory-database/commit/16f530ccf17d2e537440d9be618fc50ef3f9184e
The file: https://github.com/github/advisory-database/blob/16f530ccf17d2e537440d9be618fc50ef3f9184e/advisories/github-reviewed/2026/11/GHSA-gg4r-jv3p-qx3c/GHSA-gg4r-jv3p-qx3c.json
GHSA-fm29-4mq3-phg6 · changed · winter/wn-backend-module · HIGH · Winter: ImportExportController AJAX handlers bypass granular import/export permission gate
Advisory: https://github.com/advisories/GHSA-fm29-4mq3-phg6
The commit: https://github.com/github/advisory-database/commit/2b27bbc156da72a7a495aa73bf50e18f413eea86
The file: https://github.com/github/advisory-database/blob/2b27bbc156da72a7a495aa73bf50e18f413eea86/advisories/github-reviewed/2026/08/GHSA-fm29-4mq3-phg6/GHSA-fm29-4mq3-phg6.json
GHSA-5cwr-5jxg-pcf6 · changed · winter/wn-backend-module · MODERATE · Winter: Stored XSS through cached Brand Settings and Editor Settings custom styles
Advisory: https://github.com/advisories/GHSA-5cwr-5jxg-pcf6
The commit: https://github.com/github/advisory-database/commit/8eaca8633958dcf9f5468b860112e853d15db342
The file: https://github.com/github/advisory-database/blob/8eaca8633958dcf9f5468b860112e853d15db342/advisories/github-reviewed/2026/08/GHSA-5cwr-5jxg-pcf6/GHSA-5cwr-5jxg-pcf6.json
GHSA-p2ch-c2c3-4xm5 · changed · winter/wn-backend-module · MODERATE · Winter: CSRF through AJAX handler names reachable as backend page actions
Advisory: https://github.com/advisories/GHSA-p2ch-c2c3-4xm5
The commit: https://github.com/github/advisory-database/commit/8eaca8633958dcf9f5468b860112e853d15db342
The file: https://github.com/github/advisory-database/blob/8eaca8633958dcf9f5468b860112e853d15db342/advisories/github-reviewed/2026/08/GHSA-p2ch-c2c3-4xm5/GHSA-p2ch-c2c3-4xm5.json
GHSA-7mpf-4465-7fc2 · changed · winter/wn-backend-module · LOW · Winter: Stored XSS through Backend List widget image columns
Advisory: https://github.com/advisories/GHSA-7mpf-4465-7fc2
The commit: https://github.com/github/advisory-database/commit/16139f31cf479516b4169e8da4197810c7c1f0ef
The file: https://github.com/github/advisory-database/blob/16139f31cf479516b4169e8da4197810c7c1f0ef/advisories/github-reviewed/2026/08/GHSA-7mpf-4465-7fc2/GHSA-7mpf-4465-7fc2.json
GHSA-hq84-x37p-j6q5 · changed · winter/wn-backend-module · MODERATE · Winter: Reflected XSS through the search query parameter in the backend Table widget
Advisory: https://github.com/advisories/GHSA-hq84-x37p-j6q5
The commit: https://github.com/github/advisory-database/commit/16139f31cf479516b4169e8da4197810c7c1f0ef
The file: https://github.com/github/advisory-database/blob/16139f31cf479516b4169e8da4197810c7c1f0ef/advisories/github-reviewed/2026/08/GHSA-hq84-x37p-j6q5/GHSA-hq84-x37p-j6q5.json
GHSA-mpmw-f6h6-3g26 · changed · winter/wn-backend-module · MODERATE · Winter: My Account preview exposes another backend user's profile by record ID
Advisory: https://github.com/advisories/GHSA-mpmw-f6h6-3g26
The commit: https://github.com/github/advisory-database/commit/16139f31cf479516b4169e8da4197810c7c1f0ef
The file: https://github.com/github/advisory-database/blob/16139f31cf479516b4169e8da4197810c7c1f0ef/advisories/github-reviewed/2026/08/GHSA-mpmw-f6h6-3g26/GHSA-mpmw-f6h6-3g26.json
GHSA-6972-9mcm-vhwj · published · mongoose · MODERATE · Mongoose: Prototype pollution via Schema[.]prototype[.]virtual()
Advisory: https://github.com/advisories/GHSA-6972-9mcm-vhwj
The commit: https://github.com/github/advisory-database/commit/f2525f5841e21f85dfa6f4ed81dadccea36ea91a
The file: https://github.com/github/advisory-database/blob/f2525f5841e21f85dfa6f4ed81dadccea36ea91a/advisories/github-reviewed/2026/11/GHSA-6972-9mcm-vhwj/GHSA-6972-9mcm-vhwj.json
GHSA-4p39-36wj-23h4 · published · nokogiri · LOW · Nokogiri: Mutation XSS through `noscript` content in Nokogiri's HTML5 serializer
Advisory: https://github.com/advisories/GHSA-4p39-36wj-23h4
The commit: https://github.com/github/advisory-database/commit/6e479a4c0cc81ce990a5def8c5dfa4ab4d704753
The file: https://github.com/github/advisory-database/blob/6e479a4c0cc81ce990a5def8c5dfa4ab4d704753/advisories/github-reviewed/2026/11/GHSA-4p39-36wj-23h4/GHSA-4p39-36wj-23h4.json
GHSA-3w22-6jfg-527w · published · nokogiri · LOW · Nokogiri: Use-After-Free in Nokogiri when replacing an attribute value
Advisory: https://github.com/advisories/GHSA-3w22-6jfg-527w
The commit: https://github.com/github/advisory-database/commit/64bde5358938239cda0eb3a28eeeba01143630d5
The file: https://github.com/github/advisory-database/blob/64bde5358938239cda0eb3a28eeeba01143630d5/advisories/github-reviewed/2026/11/GHSA-3w22-6jfg-527w/GHSA-3w22-6jfg-527w.json
GHSA-v995-44v6-5fqm · published · nokogiri · LOW · JRuby: NONET is bypassed for external DTDs and entities when the systemId uses a short-form IPv4 host
Advisory: https://github.com/advisories/GHSA-v995-44v6-5fqm
The commit: https://github.com/github/advisory-database/commit/64bde5358938239cda0eb3a28eeeba01143630d5
The file: https://github.com/github/advisory-database/blob/64bde5358938239cda0eb3a28eeeba01143630d5/advisories/github-reviewed/2026/11/GHSA-v995-44v6-5fqm/GHSA-v995-44v6-5fqm.json
GHSA-8332-j7wj-wjw4 · published · mongoose · HIGH · Mongoose walks into inherited properties when hydrating, setting, and merging, allowing overwrites of built-in functions (denial of service) and shared schema state
Advisory: https://github.com/advisories/GHSA-8332-j7wj-wjw4
The commit: https://github.com/github/advisory-database/commit/8f116a86d87b548e74d3a3a7c98717acf0e71ece
The file: https://github.com/github/advisory-database/blob/8f116a86d87b548e74d3a3a7c98717acf0e71ece/advisories/github-reviewed/2026/11/GHSA-8332-j7wj-wjw4/GHSA-8332-j7wj-wjw4.json
GHSA-wr5m-5jph-8m96 · published · mongoose · MODERATE · Mongoose: Discriminator key values matching inherited properties (e.g. __t: 'constructor') bypass schema casting and can poison collections
Advisory: https://github.com/advisories/GHSA-wr5m-5jph-8m96
The commit: https://github.com/github/advisory-database/commit/6a7bebcf3498db7fdcf4b37e5a153c4c3d4f8d64
The file: https://github.com/github/advisory-database/blob/6a7bebcf3498db7fdcf4b37e5a153c4c3d4f8d64/advisories/github-reviewed/2026/11/GHSA-wr5m-5jph-8m96/GHSA-wr5m-5jph-8m96.json
GHSA-474x-hrwr-fgx4 · published · fast-xml-parser · LOW · fast-xml-parser: Quadratic CPU consumption scanning unterminated stop-node tags
Advisory: https://github.com/advisories/GHSA-474x-hrwr-fgx4
The commit: https://github.com/github/advisory-database/commit/7f16e6e8a374a5674859808ddd08b7680c2f3b3f
The file: https://github.com/github/advisory-database/blob/7f16e6e8a374a5674859808ddd08b7680c2f3b3f/advisories/github-reviewed/2026/11/GHSA-474x-hrwr-fgx4/GHSA-474x-hrwr-fgx4.json
GHSA-j8rw-jp99-435v · published · node-forge · MODERATE · Forge: TLS client crash on a handshake record received without a session
Advisory: https://github.com/advisories/GHSA-j8rw-jp99-435v
The commit: https://github.com/github/advisory-database/commit/fc9d9d012f507f04d8546fd5e372490072c80fa1
The file: https://github.com/github/advisory-database/blob/fc9d9d012f507f04d8546fd5e372490072c80fa1/advisories/github-reviewed/2026/11/GHSA-j8rw-jp99-435v/GHSA-j8rw-jp99-435v.json
GHSA-6889-vf6x-f3g5 · published · node-forge · LOW · Forge: Ed25519 signature verification accepts small-order public keys
Advisory: https://github.com/advisories/GHSA-6889-vf6x-f3g5
The commit: https://github.com/github/advisory-database/commit/ab1a6afca6364e36fbf4238b8673e9bbfb77629a
The file: https://github.com/github/advisory-database/blob/ab1a6afca6364e36fbf4238b8673e9bbfb77629a/advisories/github-reviewed/2026/11/GHSA-6889-vf6x-f3g5/GHSA-6889-vf6x-f3g5.json
GHSA-6cv4-p8m7-4r25 · published · node-forge · MODERATE · Forge: ReDoS in forge[.]http response header and cookie trimming
Advisory: https://github.com/advisories/GHSA-6cv4-p8m7-4r25
The commit: https://github.com/github/advisory-database/commit/ab1a6afca6364e36fbf4238b8673e9bbfb77629a
The file: https://github.com/github/advisory-database/blob/ab1a6afca6364e36fbf4238b8673e9bbfb77629a/advisories/github-reviewed/2026/11/GHSA-6cv4-p8m7-4r25/GHSA-6cv4-p8m7-4r25.json
GHSA-w4xr-hqv8-ch44 · published · node-forge · MODERATE · Forge: TLS client crash on an unsupported ServerHello compression method
Advisory: https://github.com/advisories/GHSA-w4xr-hqv8-ch44
The commit: https://github.com/github/advisory-database/commit/ab1a6afca6364e36fbf4238b8673e9bbfb77629a
The file: https://github.com/github/advisory-database/blob/ab1a6afca6364e36fbf4238b8673e9bbfb77629a/advisories/github-reviewed/2026/11/GHSA-w4xr-hqv8-ch44/GHSA-w4xr-hqv8-ch44.json
GHSA-2586-8ghr-69fj · published · actionpack · MODERATE · Action Pack: Possible restoration of destroyed sessions in Action Dispatch CacheStore
Advisory: https://github.com/advisories/GHSA-2586-8ghr-69fj
The commit: https://github.com/github/advisory-database/commit/7c36b233a1ac24626d0b7533780316105e32f35c
The file: https://github.com/github/advisory-database/blob/7c36b233a1ac24626d0b7533780316105e32f35c/advisories/github-reviewed/2026/11/GHSA-2586-8ghr-69fj/GHSA-2586-8ghr-69fj.json
GHSA-2gff-2mmg-m73p · published · actionpack · HIGH · Action Pack: Possible IP spoofing in Action Dispatch RemoteIp
Advisory: https://github.com/advisories/GHSA-2gff-2mmg-m73p
The commit: https://github.com/github/advisory-database/commit/7c36b233a1ac24626d0b7533780316105e32f35c
The file: https://github.com/github/advisory-database/blob/7c36b233a1ac24626d0b7533780316105e32f35c/advisories/github-reviewed/2026/11/GHSA-2gff-2mmg-m73p/GHSA-2gff-2mmg-m73p.json
GHSA-2w9f-fxwj-w2qf · published · activesupport · MODERATE · Active Support: Possible XSS vulnerability in Active Support MessagePack serializer
Advisory: https://github.com/advisories/GHSA-2w9f-fxwj-w2qf
The commit: https://github.com/github/advisory-database/commit/cb681a043eb3113ab5845cb2bdbc3186bcbc682b
The file: https://github.com/github/advisory-database/blob/cb681a043eb3113ab5845cb2bdbc3186bcbc682b/advisories/github-reviewed/2026/11/GHSA-2w9f-fxwj-w2qf/GHSA-2w9f-fxwj-w2qf.json
GHSA-4v2w-w6g6-f8f8 · published · activestorage · MODERATE · Active Storage: Possible DoS vulnerability in Active Storage proxy mode via storage errors during streaming
Advisory: https://github.com/advisories/GHSA-4v2w-w6g6-f8f8
The commit: https://github.com/github/advisory-database/commit/cb681a043eb3113ab5845cb2bdbc3186bcbc682b
The file: https://github.com/github/advisory-database/blob/cb681a043eb3113ab5845cb2bdbc3186bcbc682b/advisories/github-reviewed/2026/11/GHSA-4v2w-w6g6-f8f8/GHSA-4v2w-w6g6-f8f8.json
GHSA-5957-c7qm-m469 · published · actionmailbox · LOW · Action Mailbox: Possible signature replay in Action Mailbox Mailgun ingress
Advisory: https://github.com/advisories/GHSA-5957-c7qm-m469
The commit: https://github.com/github/advisory-database/commit/cb681a043eb3113ab5845cb2bdbc3186bcbc682b
The file: https://github.com/github/advisory-database/blob/cb681a043eb3113ab5845cb2bdbc3186bcbc682b/advisories/github-reviewed/2026/11/GHSA-5957-c7qm-m469/GHSA-5957-c7qm-m469.json
GHSA-gmj8-hvj3-49mw · published · actionpack · LOW · Action Pack: Missing SameSite attribute on session cookies from Action Pack session stores
Advisory: https://github.com/advisories/GHSA-gmj8-hvj3-49mw
The commit: https://github.com/github/advisory-database/commit/cb681a043eb3113ab5845cb2bdbc3186bcbc682b
The file: https://github.com/github/advisory-database/blob/cb681a043eb3113ab5845cb2bdbc3186bcbc682b/advisories/github-reviewed/2026/11/GHSA-gmj8-hvj3-49mw/GHSA-gmj8-hvj3-49mw.json
GHSA-r9jg-fmfx-2gv6 · published · actionpack · MODERATE · Action Pack: Possible cache poisoning in Action Pack content negotiation
Advisory: https://github.com/advisories/GHSA-r9jg-fmfx-2gv6
The commit: https://github.com/github/advisory-database/commit/cb681a043eb3113ab5845cb2bdbc3186bcbc682b
The file: https://github.com/github/advisory-database/blob/cb681a043eb3113ab5845cb2bdbc3186bcbc682b/advisories/github-reviewed/2026/11/GHSA-r9jg-fmfx-2gv6/GHSA-r9jg-fmfx-2gv6.json
GHSA-p2pm-g2h6-7j5j · published · activestorage · MODERATE · Active Storage: Possible DoS vulnerability in Active Storage filename handling
Advisory: https://github.com/advisories/GHSA-p2pm-g2h6-7j5j
The commit: https://github.com/github/advisory-database/commit/9311d3982ad98c6bbfe7e47db2fd9e20340a3950
The file: https://github.com/github/advisory-database/blob/9311d3982ad98c6bbfe7e47db2fd9e20340a3950/advisories/github-reviewed/2026/11/GHSA-p2pm-g2h6-7j5j/GHSA-p2pm-g2h6-7j5j.json
GHSA-8474-xrp6-wh69 · published · activesupport · HIGH · Active Support: Possible DoS vulnerability in Active Support safe_constantize
Advisory: https://github.com/advisories/GHSA-8474-xrp6-wh69
The commit: https://github.com/github/advisory-database/commit/f7731de3715541ceb5dbd704e64ea21a7ab2544e
The file: https://github.com/github/advisory-database/blob/f7731de3715541ceb5dbd704e64ea21a7ab2544e/advisories/github-reviewed/2026/11/GHSA-8474-xrp6-wh69/GHSA-8474-xrp6-wh69.json
GHSA-hfr4-8rjc-97m2 · published · activestorage · MODERATE · Active Storage: Possible circumvention of file size limits in Active Storage direct uploads to Google Cloud Storage
Advisory: https://github.com/advisories/GHSA-hfr4-8rjc-97m2
The commit: https://github.com/github/advisory-database/commit/f7731de3715541ceb5dbd704e64ea21a7ab2544e
The file: https://github.com/github/advisory-database/blob/f7731de3715541ceb5dbd704e64ea21a7ab2544e/advisories/github-reviewed/2026/11/GHSA-hfr4-8rjc-97m2/GHSA-hfr4-8rjc-97m2.json
GHSA-v924-7rp8-4mxh · published · activestorage · HIGH · Active Storage: Possible arbitrary file read and remote code execution in video previews, analysis and image processing
Advisory: https://github.com/advisories/GHSA-v924-7rp8-4mxh
The commit: https://github.com/github/advisory-database/commit/f7731de3715541ceb5dbd704e64ea21a7ab2544e
The file: https://github.com/github/advisory-database/blob/f7731de3715541ceb5dbd704e64ea21a7ab2544e/advisories/github-reviewed/2026/11/GHSA-v924-7rp8-4mxh/GHSA-v924-7rp8-4mxh.json
GHSA-hr4h-4c45-v4q4 · published · compose-lint · LOW · compose-lint: Text in a pull request can issue CI workflow commands through JSON and SARIF output on stdout
Advisory: https://github.com/advisories/GHSA-hr4h-4c45-v4q4
The commit: https://github.com/github/advisory-database/commit/77aa58c7ee161e8f62b18b3e15ec6d1e3e5c3343
The file: https://github.com/github/advisory-database/blob/77aa58c7ee161e8f62b18b3e15ec6d1e3e5c3343/advisories/github-reviewed/2026/11/GHSA-hr4h-4c45-v4q4/GHSA-hr4h-4c45-v4q4.json
GHSA-xcf7-88g6-7xr8 · published · tmatens/compose-lint · LOW ·  compose-lint: Workflow command injection through SARIF-directory errors triggered by pull request symlinks 
Advisory: https://github.com/advisories/GHSA-xcf7-88g6-7xr8
The commit: https://github.com/github/advisory-database/commit/209394ddea3bc54942497fec4bdeff952d05931e
The file: https://github.com/github/advisory-database/blob/209394ddea3bc54942497fec4bdeff952d05931e/advisories/github-reviewed/2026/11/GHSA-xcf7-88g6-7xr8/GHSA-xcf7-88g6-7xr8.json
GHSA-8v59-qmwv-4p6q · published · compose-lint · LOW · compose-lint: File paths embedded in pull requests can inject CI workflow commands through command-line error messages 
Advisory: https://github.com/advisories/GHSA-8v59-qmwv-4p6q
The commit: https://github.com/github/advisory-database/commit/6e2272eece174cc64c159d2b948fce1b2e054144
The file: https://github.com/github/advisory-database/blob/6e2272eece174cc64c159d2b948fce1b2e054144/advisories/github-reviewed/2026/11/GHSA-8v59-qmwv-4p6q/GHSA-8v59-qmwv-4p6q.json
GHSA-gxg8-5rwf-cg43 · published · Microsoft[.]AspNetCore[.]SignalR[.]StackExchangeRedis · HIGH · Duplicate Advisory: Microsoft Security Advisory CVE-2026-114147 - ASP[.]NET Core Denial of Service Vulnerability
Advisory: https://github.com/advisories/GHSA-gxg8-5rwf-cg43
The commit: https://github.com/github/advisory-database/commit/f8ec22dd382f14b3f0ce1ac11429fe142752059a
The file: https://github.com/github/advisory-database/blob/f8ec22dd382f14b3f0ce1ac11429fe142752059a/advisories/github-reviewed/2026/11/GHSA-gxg8-5rwf-cg43/GHSA-gxg8-5rwf-cg43.json
GHSA-49q5-vjx7-5gwr · published · Microsoft[.]AspNetCore[.]Server[.]HttpSys · HIGH · Duplicate Advisory: Microsoft Security Advisory CVE-2026-114154 - ASP[.]NET Core Denial of Service Vulnerability
Advisory: https://github.com/advisories/GHSA-49q5-vjx7-5gwr
The commit: https://github.com/github/advisory-database/commit/241dce85c2d001b5e29ae8d6c6a963258be8de0d
The file: https://github.com/github/advisory-database/blob/241dce85c2d001b5e29ae8d6c6a963258be8de0d/advisories/github-reviewed/2026/11/GHSA-49q5-vjx7-5gwr/GHSA-49q5-vjx7-5gwr.json
GHSA-c827-j3xf-67v6 · published · Microsoft[.]AspNetCore[.]App[.]Runtime[.]linux-arm · MODERATE · Duplicate Advisory: Microsoft Security Advisory CVE-2026-114156 - ASP[.]NET Core Security Feature Bypass Vulnerability
Advisory: https://github.com/advisories/GHSA-c827-j3xf-67v6
The commit: https://github.com/github/advisory-database/commit/654004458bcb7b834039d01e06e4b55b17b8b097
The file: https://github.com/github/advisory-database/blob/654004458bcb7b834039d01e06e4b55b17b8b097/advisories/github-reviewed/2026/11/GHSA-c827-j3xf-67v6/GHSA-c827-j3xf-67v6.json
GHSA-95x6-7hq8-2c37 · published · Microsoft[.]AspNetCore[.]App[.]Runtime[.]win-arm64 · HIGH · Duplicate Advisory: Microsoft Security Advisory CVE-2026-114157 - ASP[.]NET Core Security Feature Bypass Vulnerability
Advisory: https://github.com/advisories/GHSA-95x6-7hq8-2c37
The commit: https://github.com/github/advisory-database/commit/9cbf3190c1063686a3fad5940b9b9ee7dc5995cc
The file: https://github.com/github/advisory-database/blob/9cbf3190c1063686a3fad5940b9b9ee7dc5995cc/advisories/github-reviewed/2026/11/GHSA-95x6-7hq8-2c37/GHSA-95x6-7hq8-2c37.json
GHSA-hfpm-4fc4-g2wc · published · Aspire[.]Cli · HIGH · Duplicate Advisory: Microsoft Security Advisory CVE-2026-120778 - Aspire Elevation of Privilege Vulnerability
Advisory: https://github.com/advisories/GHSA-hfpm-4fc4-g2wc
The commit: https://github.com/github/advisory-database/commit/9cbf3190c1063686a3fad5940b9b9ee7dc5995cc
The file: https://github.com/github/advisory-database/blob/9cbf3190c1063686a3fad5940b9b9ee7dc5995cc/advisories/github-reviewed/2026/11/GHSA-hfpm-4fc4-g2wc/GHSA-hfpm-4fc4-g2wc.json
GHSA-fgfw-85w4-gx99 · published · Aspire[.]Cli · HIGH · Duplicate Advisory: Microsoft Security Advisory CVE-2026-120792 - Aspire Information Disclosure Vulnerability
Advisory: https://github.com/advisories/GHSA-fgfw-85w4-gx99
The commit: https://github.com/github/advisory-database/commit/98f73dd75a92b1405f17f7d9b5733cbd50b83899
The file: https://github.com/github/advisory-database/blob/98f73dd75a92b1405f17f7d9b5733cbd50b83899/advisories/github-reviewed/2026/11/GHSA-fgfw-85w4-gx99/GHSA-fgfw-85w4-gx99.json
GHSA-xqc2-xf4c-x3h3 · published · react-server-dom-parcel · react-server-dom-turbopack · react-server-dom-webpack · CRITICAL · React: Unauthenticated Remote Code Execution in React Server Components
Advisory: https://github.com/advisories/GHSA-xqc2-xf4c-x3h3
The commit: https://github.com/github/advisory-database/commit/63b06bf89edea693fa33443d9a6359dfd1d3887d
The file: https://github.com/github/advisory-database/blob/63b06bf89edea693fa33443d9a6359dfd1d3887d/advisories/github-reviewed/2026/11/GHSA-xqc2-xf4c-x3h3/GHSA-xqc2-xf4c-x3h3.json
GHSA-xhj5-c3g8-pfj8 · published · Microsoft[.]AspNetCore[.]App[.]Runtime[.]linux-arm · Microsoft[.]AspNetCore[.]App[.]Runtime[.]linux-arm64 · Microsoft[.]AspNetCore[.]App[.]Runtime[.]linux-musl-arm · Microsoft[.]AspNetCore[.]App[.]Runtime[.]linux-musl-arm64 · Microsoft[.]AspNetCore[.]App[.]Runtime[.]linux-musl-x64 · Microsoft[.]AspNetCore[.]App[.]Runtime[.]linux-x64 · Microsoft[.]AspNetCore[.]App[.]Runtime[.]osx-arm64 · Microsoft[.]AspNetCore[.]App[.]Runtime[.]osx-x64 · Microsoft[.]AspNetCore[.]App[.]Runtime[.]win-arm64 · Microsoft[.]AspNetCore[.]App[.]Runtime[.]win-x64 · Microsoft[.]AspNetCore[.]App[.]Runtime[.]win-x86 · MODERATE · Microsoft Security Advisory CVE-2026-109476 - ASP[.]NET Core Information Disclosure Vulnerability
Advisory: https://github.com/advisories/GHSA-xhj5-c3g8-pfj8
The commit: https://github.com/github/advisory-database/commit/7401bd2baf91ec1a0e8bf15386c32a6cb186a928
The file: https://github.com/github/advisory-database/blob/7401bd2baf91ec1a0e8bf15386c32a6cb186a928/advisories/github-reviewed/2026/11/GHSA-xhj5-c3g8-pfj8/GHSA-xhj5-c3g8-pfj8.json
GHSA-x33c-w48q-qrgc · published · Microsoft[.]AspNetCore[.]App[.]Runtime[.]linux-arm · Microsoft[.]AspNetCore[.]App[.]Runtime[.]linux-arm64 · Microsoft[.]AspNetCore[.]App[.]Runtime[.]linux-musl-arm · Microsoft[.]AspNetCore[.]App[.]Runtime[.]linux-musl-arm64 · Microsoft[.]AspNetCore[.]App[.]Runtime[.]linux-musl-x64 · Microsoft[.]AspNetCore[.]App[.]Runtime[.]linux-x64 · Microsoft[.]AspNetCore[.]App[.]Runtime[.]osx-arm64 · Microsoft[.]AspNetCore[.]App[.]Runtime[.]osx-x64 · Microsoft[.]AspNetCore[.]App[.]Runtime[.]win-arm64 · Microsoft[.]AspNetCore[.]App[.]Runtime[.]win-x64 · Microsoft[.]AspNetCore[.]App[.]Runtime[.]win-x86 · Microsoft[.]AspNetCore[.]WebUtilities · HIGH · Microsoft Security Advisory CVE-2026-114149 - ASP[.]NET Core Denial of Service Vulnerability
Advisory: https://github.com/advisories/GHSA-x33c-w48q-qrgc
The commit: https://github.com/github/advisory-database/commit/c12fb372d150a1e2d93646929a18146cda8f5a29
The file: https://github.com/github/advisory-database/blob/c12fb372d150a1e2d93646929a18146cda8f5a29/advisories/github-reviewed/2026/11/GHSA-x33c-w48q-qrgc/GHSA-x33c-w48q-qrgc.json
GHSA-m28h-pj36-4364 · published · Microsoft[.]AspNetCore[.]App[.]Runtime[.]linux-arm · Microsoft[.]AspNetCore[.]App[.]Runtime[.]linux-arm64 · Microsoft[.]AspNetCore[.]App[.]Runtime[.]linux-musl-arm · Microsoft[.]AspNetCore[.]App[.]Runtime[.]linux-musl-arm64 · Microsoft[.]AspNetCore[.]App[.]Runtime[.]linux-musl-x64 · Microsoft[.]AspNetCore[.]App[.]Runtime[.]linux-x64 · Microsoft[.]AspNetCore[.]App[.]Runtime[.]osx-arm64 · Microsoft[.]AspNetCore[.]App[.]Runtime[.]osx-x64 · Microsoft[.]AspNetCore[.]App[.]Runtime[.]win-arm64 · Microsoft[.]AspNetCore[.]App[.]Runtime[.]win-x64 · Microsoft[.]AspNetCore[.]App[.]Runtime[.]win-x86 · Microsoft[.]Extensions[.]Validation · MODERATE · Microsoft Security Advisory CVE-2026-118749 - ASP[.]NET Core Denial of Service Vulnerability
Advisory: https://github.com/advisories/GHSA-m28h-pj36-4364
The commit: https://github.com/github/advisory-database/commit/7de9e61011d0d93daf0476155d8141df98aa7819
The file: https://github.com/github/advisory-database/blob/7de9e61011d0d93daf0476155d8141df98aa7819/advisories/github-reviewed/2026/11/GHSA-m28h-pj36-4364/GHSA-m28h-pj36-4364.json
GHSA-vmv3-wvjp-wqpj · published · System[.]Formats[.]Cbor · MODERATE · Microsoft Security Advisory CVE-2026-118747 - .NET Denial of Service Vulnerability
Advisory: https://github.com/advisories/GHSA-vmv3-wvjp-wqpj
The commit: https://github.com/github/advisory-database/commit/9276e05b9b31b4c33c7249c9e48e21b29b52cd9b
The file: https://github.com/github/advisory-database/blob/9276e05b9b31b4c33c7249c9e48e21b29b52cd9b/advisories/github-reviewed/2026/11/GHSA-vmv3-wvjp-wqpj/GHSA-vmv3-wvjp-wqpj.json
GHSA-3g4v-f5gv-c7xf · published · Microsoft[.]NETCore[.]App[.]Runtime[.]linux-arm · Microsoft[.]NETCore[.]App[.]Runtime[.]linux-arm64 · Microsoft[.]NETCore[.]App[.]Runtime[.]linux-musl-arm · Microsoft[.]NETCore[.]App[.]Runtime[.]linux-musl-arm64 · Microsoft[.]NETCore[.]App[.]Runtime[.]linux-musl-x64 · Microsoft[.]NETCore[.]App[.]Runtime[.]linux-x64 · Microsoft[.]NETCore[.]App[.]Runtime[.]osx-arm64 · Microsoft[.]NETCore[.]App[.]Runtime[.]osx-x64 · MODERATE · Microsoft Security Advisory CVE-2026-109475 - .NET Denial of Service Vulnerability
Advisory: https://github.com/advisories/GHSA-3g4v-f5gv-c7xf
The commit: https://github.com/github/advisory-database/commit/c528c4a7d1a9b85f54242a979ece46f2e26e24d1
The file: https://github.com/github/advisory-database/blob/c528c4a7d1a9b85f54242a979ece46f2e26e24d1/advisories/github-reviewed/2026/11/GHSA-3g4v-f5gv-c7xf/GHSA-3g4v-f5gv-c7xf.json
GHSA-cpw3-h88j-9f6x · published · Microsoft[.]NETCore[.]App[.]Runtime[.]linux-arm · Microsoft[.]NETCore[.]App[.]Runtime[.]linux-arm64 · Microsoft[.]NETCore[.]App[.]Runtime[.]linux-musl-arm · Microsoft[.]NETCore[.]App[.]Runtime[.]linux-musl-arm64 · Microsoft[.]NETCore[.]App[.]Runtime[.]linux-musl-x64 · Microsoft[.]NETCore[.]App[.]Runtime[.]linux-x64 · Microsoft[.]NETCore[.]App[.]Runtime[.]osx-arm64 · Microsoft[.]NETCore[.]App[.]Runtime[.]osx-x64 · Microsoft[.]NETCore[.]App[.]Runtime[.]win-arm64 · Microsoft[.]NETCore[.]App[.]Runtime[.]win-x64 · Microsoft[.]NETCore[.]App[.]Runtime[.]win-x86 · System[.]Text[.]Json · MODERATE · Microsoft Security Advisory CVE-2026-120796 - .NET Denial of Service Vulnerability
Advisory: https://github.com/advisories/GHSA-cpw3-h88j-9f6x
The commit: https://github.com/github/advisory-database/commit/c528c4a7d1a9b85f54242a979ece46f2e26e24d1
The file: https://github.com/github/advisory-database/blob/c528c4a7d1a9b85f54242a979ece46f2e26e24d1/advisories/github-reviewed/2026/11/GHSA-cpw3-h88j-9f6x/GHSA-cpw3-h88j-9f6x.json
GHSA-f7vh-h5g3-7jrh · published · Aspire[.]Hosting[.]AppHost · Aspire[.]Hosting · HIGH · Microsoft Security Advisory CVE-2026-120006 - Aspire Elevation of Privilege Vulnerability
Advisory: https://github.com/advisories/GHSA-f7vh-h5g3-7jrh
The commit: https://github.com/github/advisory-database/commit/c528c4a7d1a9b85f54242a979ece46f2e26e24d1
The file: https://github.com/github/advisory-database/blob/c528c4a7d1a9b85f54242a979ece46f2e26e24d1/advisories/github-reviewed/2026/11/GHSA-f7vh-h5g3-7jrh/GHSA-f7vh-h5g3-7jrh.json
GHSA-6527-9fp8-r4x6 · published · Microsoft[.]AspNetCore[.]WebUtilities · MODERATE · Microsoft Security Advisory CVE-2026-118750 - ASP[.]NET Core Denial of Service Vulnerability
Advisory: https://github.com/advisories/GHSA-6527-9fp8-r4x6
The commit: https://github.com/github/advisory-database/commit/9672de6eda406b2becc926ca6a39073659fa910d
The file: https://github.com/github/advisory-database/blob/9672de6eda406b2becc926ca6a39073659fa910d/advisories/github-reviewed/2026/11/GHSA-6527-9fp8-r4x6/GHSA-6527-9fp8-r4x6.json
GHSA-xw2x-23jm-j582 · published · Microsoft[.]AspNetCore[.]App[.]Runtime[.]linux-arm · Microsoft[.]AspNetCore[.]App[.]Runtime[.]linux-arm64 · Microsoft[.]AspNetCore[.]App[.]Runtime[.]linux-musl-arm · Microsoft[.]AspNetCore[.]App[.]Runtime[.]linux-musl-arm64 · Microsoft[.]AspNetCore[.]App[.]Runtime[.]linux-musl-x64 · Microsoft[.]AspNetCore[.]App[.]Runtime[.]linux-x64 · Microsoft[.]AspNetCore[.]App[.]Runtime[.]osx-arm64 · Microsoft[.]AspNetCore[.]App[.]Runtime[.]osx-x64 · Microsoft[.]AspNetCore[.]App[.]Runtime[.]win-arm64 · Microsoft[.]AspNetCore[.]App[.]Runtime[.]win-x64 · Microsoft[.]AspNetCore[.]App[.]Runtime[.]win-x86 · MODERATE · Microsoft Security Advisory CVE-2026-109481 - ASP[.]NET Core Elevation of Privilege Vulnerability
Advisory: https://github.com/advisories/GHSA-xw2x-23jm-j582
The commit: https://github.com/github/advisory-database/commit/3259e2adc67907723c9a928f5badc5a6fd99cca9
The file: https://github.com/github/advisory-database/blob/3259e2adc67907723c9a928f5badc5a6fd99cca9/advisories/github-reviewed/2026/11/GHSA-xw2x-23jm-j582/GHSA-xw2x-23jm-j582.json
Permanent record: https://flarereef.flareforward.com/n/457